EDBT 2026 Demo / reviewers in the wild / expert
Doniyorkhon Obidov
dblp:429/7655
· DBLP profile ↗
1ranked-venue papers
1as first author
1since 2021 · last 2026
—ORCID · unresolved
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 100% | |
| Artificial intelligence
1 paper |
Language models and text generation · 100% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Natural language and speech › Language models and text generation › prompting › prompt engineering
prompt optimization |
1.0 | 1 | 2026 | Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs · AAAI 2026 |
Security and privacy of machine learning
adversarial attack |
1.0 | 1 | 2026 | Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs · AAAI 2026 |
Security and privacy of machine learning › adversarial attack
jailbreak attack |
1.0 | 1 | 2026 | Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs · AAAI 2026 |
Methods — techniques the papers use, named apart from their topics
deep prompt optimization · 2.0multilayer perceptron · 1.0multi-layer perceptron · 1.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMsabstractLarge Language Models (LLMs) demonstrate impressive capabilities across many applications but remain vulnerable to jailbreak attacks, which elicit harmful or unintended content. While model fine-tuning is an option for safety alignment, it is costly and prone to catastrophic forgetting. Prompt optimization has emerged as a promising alternative, yet existing prompt-based defenses typically rely on static modifications (e.g., fixed prefixes or suffixes) that cannot adapt to diverse and evolving attacks. We propose Dynamic Deep Prompt Optimization (DDPO), the first jailbreak defense based on deep prompt optimization. DDPO uses the target LLM's own intermediate layers as feature extractors to dynamically generate defensive embeddings via a lightweight multilayer perceptron. These tailored embeddings are then injected into a subsequent intermediate layer, enabling an input-dependent defense without modifying the LLM's weights. This design ensures high adaptability with minimal computational overhead. Experiments on a diverse set of models and attacks demonstrate that DDPO significantly outperforms static prompt optimization methods, particularly on weakly aligned models and when handling semantically ambiguous benign prompts, successfully distinguishing them from genuinely harmful requests. Doniyorkhon Obidov, Honggang Yu, Kaichen Yang |
AAAI | 1 |